You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@storm.apache.org by Nishu <ni...@gmail.com> on 2014/04/24 09:36:10 UTC
Fwd: Storm with Drools Complex Event Processing rules
Hi,
I am using Storm with Drools Fusion for adding CEP rules to raise system
alerts . I need to raise alerts for system if condition is matched for last
10 records or 10 minutes.
Bolt is receiving one event in tuple from Spout. How can I make it work
where bolt can read multiple events(lets say 10 events or last 10 minute
events) and how to call CEP rules on those event to raise an alert?
I checked following thread also :
https://groups.google.com/forum/#!topic/storm-user/VqBPnheDtQ8
--
Thanks,
Nishu Tayal
Re: Storm with Drools Complex Event Processing rules
Posted by Eugene <ed...@gmail.com>.
Nishu,
It's not right to share copyrighted material. Look at it this way - authors
spend nights and weekends writing the book, sacrificed their time with
family so all of us can learn and move our project fast forward. Paying for
the book will be a little token of appreciation. You employer should pay -
eBook version are reasonably priced for any country and the industry.
Thanks.
On Apr 24, 2014 2:33 PM, "Nishu" <ni...@gmail.com> wrote:
> Hi Eugene,
> Thanks for the links. These links are quite useful to go forward in this
> direction.
> As these books are paid if you have copy of these books available, can you
> please share on my mail ID?
>
> Thanks,
> Nishu
>
>
> On Thu, Apr 24, 2014 at 6:59 PM, Eugene <ed...@gmail.com> wrote:
>
>> Hi Nishi,
>> I will point to you some resources that solve similar problems:
>> 1. Book: Storm Real-time processing Cookbook <http://amzn.to/OEaK5N> has
>> chapter "Rule-based analysis of the log stream". This recipe integrates the
>> JBoss Library and Drools into a bolt and allow to capture event based on
>> rule. Next you need sliding window analysis to see if your events frequency
>> exceed some threshold. The same book has chapter how to implement "rolling
>> window topology" or better yet,
>> 2. brand new book "Storm Blueprints <http://goo.gl/tuyY65>" explain how
>> to do sliding windows and alerting using Trident ( which I prefer over
>> plain storm semantics). Using those 2 resources it should be easy to craft
>> solution for your use case.
>> good luck
>>
>>
>>
>> On Thu, Apr 24, 2014 at 3:36 AM, Nishu <ni...@gmail.com> wrote:
>>
>>> Hi,
>>>
>>> I am using Storm with Drools Fusion for adding CEP rules to raise system
>>> alerts . I need to raise alerts for system if condition is matched for last
>>> 10 records or 10 minutes.
>>> Bolt is receiving one event in tuple from Spout. How can I make it work
>>> where bolt can read multiple events(lets say 10 events or last 10 minute
>>> events) and how to call CEP rules on those event to raise an alert?
>>>
>>> I checked following thread also :
>>> https://groups.google.com/forum/#!topic/storm-user/VqBPnheDtQ8
>>>
>>> --
>>> Thanks,
>>> Nishu Tayal
>>>
>>>
>>
>>
>> --
>> Eugene Dvorkin
>> Software Engineer
>> New York City Storm User Group - organizer
>> WebMD
>> email: edvorkin@gmail.com
>> phone: 646-250-9649
>> eugenedvorkin.com
>> Connect with me on:
>> LinkedIn <http://www.linkedin.com/in/eugenedvorkin> Twitter<http://twitter.com/edvorkin>
>>
>
>
>
> --
> with regards,
> Nishu Tayal
>
Re: Storm with Drools Complex Event Processing rules
Posted by Nishu <ni...@gmail.com>.
Hi Eugene,
Thanks for the links. These links are quite useful to go forward in this
direction.
As these books are paid if you have copy of these books available, can you
please share on my mail ID?
Thanks,
Nishu
On Thu, Apr 24, 2014 at 6:59 PM, Eugene <ed...@gmail.com> wrote:
> Hi Nishi,
> I will point to you some resources that solve similar problems:
> 1. Book: Storm Real-time processing Cookbook <http://amzn.to/OEaK5N> has
> chapter "Rule-based analysis of the log stream". This recipe integrates the
> JBoss Library and Drools into a bolt and allow to capture event based on
> rule. Next you need sliding window analysis to see if your events frequency
> exceed some threshold. The same book has chapter how to implement "rolling
> window topology" or better yet,
> 2. brand new book "Storm Blueprints <http://goo.gl/tuyY65>" explain how
> to do sliding windows and alerting using Trident ( which I prefer over
> plain storm semantics). Using those 2 resources it should be easy to craft
> solution for your use case.
> good luck
>
>
>
> On Thu, Apr 24, 2014 at 3:36 AM, Nishu <ni...@gmail.com> wrote:
>
>> Hi,
>>
>> I am using Storm with Drools Fusion for adding CEP rules to raise system
>> alerts . I need to raise alerts for system if condition is matched for last
>> 10 records or 10 minutes.
>> Bolt is receiving one event in tuple from Spout. How can I make it work
>> where bolt can read multiple events(lets say 10 events or last 10 minute
>> events) and how to call CEP rules on those event to raise an alert?
>>
>> I checked following thread also :
>> https://groups.google.com/forum/#!topic/storm-user/VqBPnheDtQ8
>>
>> --
>> Thanks,
>> Nishu Tayal
>>
>>
>
>
> --
> Eugene Dvorkin
> Software Engineer
> New York City Storm User Group - organizer
> WebMD
> email: edvorkin@gmail.com
> phone: 646-250-9649
> eugenedvorkin.com
> Connect with me on:
> LinkedIn <http://www.linkedin.com/in/eugenedvorkin> Twitter<http://twitter.com/edvorkin>
>
--
with regards,
Nishu Tayal
Re: Storm with Drools Complex Event Processing rules
Posted by Eugene <ed...@gmail.com>.
Hi Nishi,
I will point to you some resources that solve similar problems:
1. Book: Storm Real-time processing Cookbook <http://amzn.to/OEaK5N> has
chapter "Rule-based analysis of the log stream". This recipe integrates the
JBoss Library and Drools into a bolt and allow to capture event based on
rule. Next you need sliding window analysis to see if your events frequency
exceed some threshold. The same book has chapter how to implement "rolling
window topology" or better yet,
2. brand new book "Storm Blueprints <http://goo.gl/tuyY65>" explain how to
do sliding windows and alerting using Trident ( which I prefer over plain
storm semantics). Using those 2 resources it should be easy to craft
solution for your use case.
good luck
On Thu, Apr 24, 2014 at 3:36 AM, Nishu <ni...@gmail.com> wrote:
> Hi,
>
> I am using Storm with Drools Fusion for adding CEP rules to raise system
> alerts . I need to raise alerts for system if condition is matched for last
> 10 records or 10 minutes.
> Bolt is receiving one event in tuple from Spout. How can I make it work
> where bolt can read multiple events(lets say 10 events or last 10 minute
> events) and how to call CEP rules on those event to raise an alert?
>
> I checked following thread also :
> https://groups.google.com/forum/#!topic/storm-user/VqBPnheDtQ8
>
> --
> Thanks,
> Nishu Tayal
>
>
--
Eugene Dvorkin
Software Engineer
New York City Storm User Group - organizer
WebMD
email: edvorkin@gmail.com
phone: 646-250-9649
eugenedvorkin.com
Connect with me on:
LinkedIn <http://www.linkedin.com/in/eugenedvorkin>
Twitter<http://twitter.com/edvorkin>